oracle enterprise communications broker

Name: oracle enterprise communications broker
Brand: oracle

productUS

cpe:2.3:a:oracle:enterprise_communications_broker:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical12high12medium1low

updated 2026-10-26

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-9511US	high7.5	59.5% (99th)	Exploit	no fix	2019-08-13	2 versions
CVE-2021-23017US	high7.7	53.5% (99th)	Exploit	no fix	2021-06-01	= 3.3.0
CVE-2021-3712US	high7.4	50.4% (99th)	Exploit	no fix	2021-08-24	2 versions
CVE-2021-23337US	high7.2	21.3% (98th)	Exploit	no fix	2021-02-15	2 versions
CVE-2021-29425US	medium4.8	10.5% (96th)	Exploit	no fix	2021-04-13	= 3.3
CVE-2020-1971US	medium5.9	7.05% (94th)	Exploit	no fix	2020-12-08	3 versions
CVE-2020-8203US	high7.4	5.21% (92nd)	Exploit	no fix	2020-07-15	3 versions
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	= 3.3
CVE-2021-3711US	critical9.8	87.8% (100th)	—	no fix	2021-08-24	2 versions
CVE-2019-9513US	high7.5	81.6% (100th)	—	no fix	2019-08-13	2 versions
CVE-2014-9708US	medium5.0	56.2% (99th)	—	no fix	2015-03-31	≤ 2.0.0
CVE-2020-28500US	medium5.3	7.34% (94th)	—	no fix	2021-02-15	2 versions
CVE-2018-11236US	critical9.8	7.05% (94th)	—	no fix	2018-05-18	2 versions
CVE-2020-11080US	high7.5	5.32% (93rd)	—	no fix	2020-06-03	2 versions
CVE-2018-6485US	critical9.8	4.69% (92nd)	—	no fix	2018-02-01	2 versions
CVE-2016-3515US	high7.5	3.78% (90th)	—	no fix	2016-07-21	≤ 2.0.041
CVE-2018-16865US	high7.8	3.02% (87th)	—	no fix	2019-01-11	2 versions
CVE-2016-3514US	medium6.5	2.74% (86th)	—	no fix	2016-07-21	≤ 2.0.041
CVE-2020-10725US	high7.7	2.21% (83rd)	—	no fix	2020-05-20	2 versions
CVE-2016-3516US	low3.1	1.73% (78th)	—	no fix	2016-07-21	≤ 2.0.041
CVE-2020-14563US	medium6.1	0.96% (61st)	—	no fix	2020-07-15	3.0.0 → 3.2.0
CVE-2020-14721US	medium6.3	0.96% (61st)	—	no fix	2020-07-15	3.0.0 → 3.2.0
CVE-2020-14722US	medium5.8	0.90% (59th)	—	no fix	2020-07-15	3.0.0 → 3.2.0
CVE-2018-11237US	high7.8	0.88% (59th)	—	no fix	2018-05-18	2 versions
CVE-2018-16864US	high7.8	0.71% (53rd)	—	no fix	2019-01-11	2 versions
CVE-2020-10726US	medium4.4	0.47% (40th)	—	no fix	2020-05-20	2 versions
CVE-2020-10723US	medium6.7	0.38% (31st)	—	no fix	2020-05-19	2 versions
CVE-2020-10722US	medium6.7	0.38% (31st)	—	no fix	2020-05-19	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-190Integer Overflow or Wraparound5 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-476NULL Pointer Dereference2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan